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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims : 

1 . (Currently Amended) A method of enabling authenticated communication of 
information between at least a primary entity and each of one or more secondary entities in a 
computer system , each of the one or more secondary entities having an identifier associated 
with it, the method including the steps of: 

allocatin g, in the computer system, a first secret key to only t he primary entity; 

for each of the one or more secondary entities, determining , in the computer system, 
a second secret key by applying a one way function to only that secondary entity's identifier 
and the first secret key, such that the second secret key is a variant of the first secret key 
only ascertainable with knowledge of the first secret key from the primary entity ; 

allocatin g, in the computer system, the second secret key to the or each secondary 

entity. 

2. (Original) A method according to claim 1, wherein the identifiers allocated to the 
secondary entities are generated stochastically, pseudo-randomly or arbitrarily. 

3. (Original) A method according to claim 2, wherein the one way function is a hash 
function. 

4. (Cancelled) 

5. (Previously Presented) A method according to claim 3, wherein the one way 
function is a Secure Hash Algorithm function. 

6. (Original) A method according to claim 1, wherein each of the entities is 
implemented in an integrated circuit. 

7. (Original) A method according to claim 1, wherein each of the entities is 
implemented in an integrated circuit separate from the integrated circuits in which the other 
entities are implemented. 
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8. (Original) A method according to claim 1, wherein one or more of the secondary 
entities are implemented in a corresponding plurality of integrated circuits. 

9. (Original) A method according to claim 1, wherein the primary entity is 
implemented in an integrated circuit. 

10. (Original) A method according to claim 1 , wherein both the primary and secondary 
entities are implemented in integrated circuits. 

1 1 . (Previously Presented) A method according to claim 1 , in which the first entity 
wishes to communicate with one of the second entities, the method including the steps, in 
the first entity, of: 

receiving data from the second entity; 

using the data and the first secret key to generate the second secret key associated 
with the second entity. 

12 (Original) A method according to claim 1 1 , wherein the data contains an identifier 
for the second entity 

1 3 . (Previously Presented) A method according to claim 1 1 , in which the first entity 
wishes to send an authenticated message to the second entity, the method including the 
steps, in the first entity, of: 

using the generated second secret key to sign a message, thereby generating a digital 
signature; 

outputting the message and the digital signature for use by the second entity, which 
can validate the message by using the digital signature and its own copy of the second secret 
key. 

14. (Previously Presented) A method according to claim 13 in which the generated 
signature includes a nonce from the first entity, and the output from the first entity includes 
the nonce, thereby enabling the second entity to validate the message using the digital 
signature, the nonce, and its own copy of the second secret key. 
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15 (Original) A method according to claim 1 1 wherein the data contains a first nonce. 

16 (Previously Presented) A method according to claim 15 in which the first entity 
wishes to send an authenticated message to the second entity, the method including the 
steps, in the first entity, of: 

using the generated second secret key and the first nonce to sign a message, thereby 
generating a digital signature; 

outputting the message and the digital signature for use by the second entity, which 
can validate the message by using the digital signature and its own copy of the second secret 
key. 

17. (Previously Presented) A method according to claim 16 in which the generated 
signature includes a second nonce from the first entity, and the output from the first entity 
includes the second nonce, thereby enabling the second entity to validate the message using 
the digital signature, the first and second nonces, and its own copy of the second secret key. 

18. (Previously Presented) A method according to claim 1 1, in which the first entity 
wishes to send an encrypted message to the second entity, the method including the steps, in 
the first entity, of: 

using the generated second secret key to encrypt a message, thereby generating an 
encrypted message; 

outputting the encrypted message for use by the second entity, which can decrypt the 
message by using its own copy of the second secret key. 

19. (Previously Presented) A method according to claim 18 in which the encrypted 
message includes a nonce from the first entity, and the output from the first entity includes 
the nonce, thereby enabling the second entity to decrypt the message using the nonce, and 
its own copy of the second secret key. 

20. (Previously Presented) A method according to claim 15, in which the first entity 
wishes to send an encrypted message that incorporates the first nonce to the second entity, 
the method including the steps, in the first entity, of: 

using the generated second secret key to encrypt a message and the first nonce, 
thereby generating an encrypted message; 
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outputting the encrypted message for use by the second entity, which can decrypt the 
encrypted message by using its own copy of the second secret key. 

21 . (Original) A method according to claim 20 in which the encrypted message includes 
a second nonce from the first entity, and the output from the first entity includes the second 
nonce. 

22. (Previously Presented) A method according to claim 1, in which one of the second 
entities wishes to send an authenticated message to the first entity, the method including the 
steps, in the second entity, of: 

using the second secret key to sign a message, thereby to generate a digital signature; 

and 

outputting the message, digital signature and the second entity's identifier for use by 
the first entity, such that the first entity can use the identifier and the first secret key to 
generate the second secret key associated with the second entity, and thereby authenticate 
the message via the digital signature. 

23. (Previously Presented) A method according to claim 1, in which one of the second 
entities wishes to send an authenticated message to the first entity, the method including the 
steps, in the second entity, of: 

using the second secret key and a nonce to sign a message, thereby to generate a 
digital signature; and 

outputting the message, nonce, digital signature and the second entity's identifier for 
use by the first entity, such that the first entity can use the identifier and the first secret key 
to generate the second secret key associated with the second entity, and thereby authenticate 
the message via the nonce and digital signature. 

24. (Previously Presented) A method according to claim 1, in which one of the second 
entities wishes to send an authenticated message to the first entity, the method including the 
steps, in the second entity, of: 

receiving a first nonce from the first entity; 

using the second secret key and the first nonce to sign a message, thereby to generate 
a digital signature; and 
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outputting the message, digital signature and the second entity's identifier for use by 
the first entity, such that the first entity can use the identifier and the first secret key to 
generate the second secret key associated with the second entity, and thereby authenticate 
the message via the first nonce and digital signature. 

25 . (Previously Presented) A method according to claim 1 , in which one of the second 
entities wishes to send an authenticated message to the first entity, the method including the 
steps, in the second entity, of: 

receiving a first nonce from the first entity; 

using the second secret key, the first nonce, and a second nonce to sign a message, 
thereby to generate a digital signature; and 

outputting the message, second nonce, digital signature and the second entity's 
identifier for use by the first entity, such that the first entity can use the identifier and the 
first secret key to generate the second secret key associated with the second entity, and 
thereby authenticate the message via the first nonce, second nonce and digital signature. 

26. (Previously Presented) A method according to claim 1, in which one of the second 
entities wishes to send an encrypted message to the first entity, the method including the 
steps, in the second entity, of: 

using the second secret key to encrypt the message, thereby to generate an encrypted 
message; and 

outputting the encrypted message and the second entity's identifier for use by the 
first entity, such that the first entity can use the identifier and the first secret key to generate 
the second secret key associated with the second entity, and thereby decrypt the encrypted 
message. 

27. (Previously Presented) A method according to claim 1, in which one of the second 
entities wishes to send an encrypted message to the first entity, the method including the 
steps, in the second entity, of: 

using the second secret key to encrypt the message and a nonce, thereby to generate 
an encrypted message; and 

outputting the nonce, encrypted message and the second entity's identifier for use by 
the first entity, such that the first entity can use the identifier and the first secret key to 
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generate the second secret key associated with the second entity, and thereby decrypt the 
encrypted message. 

28. (Previously Presented) A method according to claim 1, in which one of the second 
entities wishes to send an encrypted message to the first entity, the method including the 
steps, in the second entity, of: 

receiving a nonce from the first entity; 

using the second secret key to encrypt the message and the nonce, thereby to 
generate an encrypted message; and 

outputting the encrypted message and the second entity's identifier for use by the 
first entity, such that the first entity can use the identifier and the first secret key to generate 
the second secret key associated with the second entity, and thereby decrypt the encrypted 
message. 

29. (Previously Presented) A method according to claim 1, in which one of the second 
entities wishes to send an encrypted message to the first entity, the method including the 
steps, in the second entity, of: 

receiving a first nonce from the first entity; 

using the second secret key to encrypt the message and the first nonce and a second 
nonce, thereby to generate an encrypted message; and 

outputting the second nonce, the encrypted message and the second entity's 
identifier for use by the first entity, such that the first entity can use the identifier and the 
first secret key to generate the second secret key associated with the second entity, and 
thereby decrypt the encrypted message. 

30. (Original) A method according to any one of claims 14, 15, 16, 17, 19, 20, 21, 23, 
24, 25, 27, 28 or 29, wherein at least one of the nonces is a pseudo-random number. 

3 1 . (Original) A method according to any one of claims 11 to 21 , wherein the 
communication is an authenticated read of a field of the first entity. 

32. (Original) A method according to any one of claims 22 to 29, wherein the 
communication is an authenticated read of a field of the second entity. 



